f5ff33553db45c9ed653581354580158_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5ff33553db45c9ed653581354580158_JaffaCakes118
Size

114KB
MD5

f5ff33553db45c9ed653581354580158
SHA1

37e4532478d2e98380ad18520b20642cda003b8a
SHA256

d298319b94612ecb430f4d49baa18fe4f4c80f96ec2a010714f39fa0ef36c2b7
SHA512

3dca0a0fa8ac0db72c7364baeb1a5933223e5f0ca9abf6a45c55213e5c078d52c8f3f24e96c4a867d2e4e8aa888326c781e929a839622d2cd7122e7a4e4cf37a
SSDEEP

1536:2d9We6hbfXV+IvBV9njbWRIhsebJaOnuWTzAE9FkvKS7uApbAtZNTB2l1tcmj6xp:WWe6hbjSIJaOnuWTzZ9FkvKKAaXKxR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5ff33553db45c9ed653581354580158_JaffaCakes118

Files

f5ff33553db45c9ed653581354580158_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da34bec822997c86c5a5ca66fe0e0c11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetTickCount
GetCurrentThread
LoadLibraryA
GetProcAddress
GetSystemInfo
GetCurrentDirectoryA
CompareStringA
GetVersionExA
LocalAlloc
GetVersion

user32

CharNextA
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
GetMessageA
BeginPaint

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ